Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CAE234B7EC11F1822FF6F4CE1D38B0.roa
File:                     90CAE234B7EC11F1822FF6F4CE1D38B0.roa (raw, json)
Hash identifier:          dKHjIqrAEv2iwAtE22PtQcNigkaUSpIpbB+JN6xdm0Y=
Subject key identifier:   51:35:2B:8E:B7:32:18:3B:E7:11:45:01:6C:7B:4D:74:18:CE:53:55
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D893
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CAE234B7EC11F1822FF6F4CE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:50:10 +0000
ROA not before:           Thu 24 Sep 2026 07:50:06 +0000
ROA not after:            Sun 11 Oct 2026 07:50:06 +0000
asID:                     197574
IP address blocks:        45.194.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120979 (0x1d893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 24 07:50:06 2026 GMT
            Not After : Oct 11 07:50:06 2026 GMT
        Subject: CN=6ab4d632-217a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:7b:b3:2e:77:20:ad:9a:87:bf:e6:94:e6:
                    56:3e:8f:05:b9:ed:86:13:ee:7d:5c:c3:2c:77:38:
                    e9:46:7d:2a:04:f7:58:6f:68:4a:f2:98:7c:be:5d:
                    4c:ce:07:36:c1:32:07:51:fe:8d:0c:9b:a8:e9:9f:
                    7a:b4:05:7a:d6:0f:d3:95:fa:76:33:c9:88:51:56:
                    1e:a5:d8:7e:9b:73:ad:08:c1:ee:0c:57:1f:d7:4a:
                    f3:1f:65:f2:6d:35:ea:23:0e:cb:5d:33:07:60:26:
                    75:ed:6a:d1:98:6a:06:71:88:ed:31:0a:b5:e4:84:
                    d1:ef:b2:73:2f:11:c0:a7:9c:05:b1:0a:68:19:46:
                    0e:e6:da:a1:c3:22:67:36:e2:30:5a:54:98:8f:c0:
                    65:c2:13:50:e9:2d:80:d0:38:a8:be:dd:8a:b8:41:
                    db:45:28:85:64:15:95:5f:ce:08:cd:f0:09:2b:5c:
                    1b:fb:34:ea:0c:a6:b5:21:9f:2d:a4:d7:d1:46:04:
                    3d:cf:1b:f8:b1:3a:28:c7:0f:c0:c4:6b:dc:ee:70:
                    be:fa:5b:52:4b:0f:11:0c:67:d8:4d:31:1f:9e:2b:
                    32:21:71:6e:23:b7:6d:e1:16:be:79:7b:3f:e6:3e:
                    36:19:02:3c:79:59:67:88:b1:3a:9d:99:90:0c:05:
                    d6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:2B:8E:B7:32:18:3B:E7:11:45:01:6C:7B:4D:74:18:CE:53:55
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CAE234B7EC11F1822FF6F4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:37:72:f3:99:ac:3d:36:b9:69:26:d9:53:ca:b8:44:78:5d:
         68:da:f2:6a:2c:d4:35:c6:24:05:49:ef:37:82:2e:bf:c8:bf:
         3d:da:fb:4f:82:9e:34:09:e4:fc:cb:f5:10:8d:84:84:1d:8f:
         86:a4:e2:77:20:5f:96:5d:ce:75:2a:0d:56:ec:1b:bc:d2:4c:
         eb:39:7b:34:74:8b:93:e6:aa:de:92:33:f5:34:69:31:44:74:
         e5:4a:da:b9:ab:51:58:d7:10:c2:ca:85:1c:20:e9:8c:09:d2:
         30:e6:03:d1:05:dc:46:43:90:ef:33:83:fb:88:35:b8:fa:c3:
         27:01:08:45:82:e3:83:72:82:e9:60:a7:74:ec:46:77:aa:c3:
         ff:6f:97:6c:85:aa:17:83:20:cb:40:aa:34:5f:45:1e:74:3e:
         8b:c5:0d:d4:21:ac:89:75:af:a2:48:c5:35:a3:f8:5c:f1:f7:
         25:e6:47:73:5f:5d:c2:68:1c:95:cc:ba:e7:02:5a:f2:e4:4c:
         26:bb:13:34:65:ea:bf:45:a7:bd:a0:5f:f9:10:7c:6d:1b:09:
         d8:97:5a:21:e2:70:d6:0b:99:3e:84:36:63:99:4f:a9:d0:7a:
         b9:82:ea:8b:7e:bb:59:74:3a:7b:eb:5a:3f:17:62:2f:9e:ef:
         9b:ab:72:48
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdiTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI0MDc1MDA2WhcNMjYxMDExMDc1MDA2WjAYMRYw
FAYDVQQDEw02YWI0ZDYzMi0yMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3Ll7sy53IK2ah7/mlOZWPo8Fue2GE+59XMMsdzjpRn0qBPdYb2hK8ph8
vl1Mzgc2wTIHUf6NDJuo6Z96tAV61g/Tlfp2M8mIUVYepdh+m3OtCMHuDFcf10rz
H2XybTXqIw7LXTMHYCZ17WrRmGoGcYjtMQq15ITR77JzLxHAp5wFsQpoGUYO5tqh
wyJnNuIwWlSYj8BlwhNQ6S2A0Diovt2KuEHbRSiFZBWVX84IzfAJK1wb+zTqDKa1
IZ8tpNfRRgQ9zxv4sTooxw/AxGvc7nC++ltSSw8RDGfYTTEfnisyIXFuI7dt4Ra+
eXs/5j42GQI8eVlniLE6nZmQDAXWSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFE1
K463Mhg75xFFAWx7TXQYzlNVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MENBRTIzNEI3RUMxMUYxODIyRkY2RjRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJCMA0GCSqGSIb3DQEBCwUA
A4IBAQAWN3Lzmaw9NrlpJtlTyrhEeF1o2vJqLNQ1xiQFSe83gi6/yL892vtPgp40
CeT8y/UQjYSEHY+GpOJ3IF+WXc51Kg1W7Bu80kzrOXs0dIuT5qrekjP1NGkxRHTl
Stq5q1FY1xDCyoUcIOmMCdIw5gPRBdxGQ5DvM4P7iDW4+sMnAQhFguODcoLpYKd0
7EZ3qsP/b5dshaoXgyDLQKo0X0UedD6LxQ3UIayJda+iSMU1o/hc8fcl5kdzX13C
aByVzLrnAlry5EwmuxM0Zeq/Rae9oF/5EHxtGwnYl1oh4nDWC5k+hDZjmU+p0Hq5
guqLfrtZdDp761o/F2Ivnu+bq3JI
-----END CERTIFICATE-----